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(57) 

[8¥#t3M&] whiles s&ffiic^Rf^ft^nfcx 
— * • x b D—ASr, f-^iS'^l^ltSISt, * 

rofv'^^iili, it'Wla^J'F (CPU) 

*<Dig{f m{&Bfc&a»tt3o c s sBt^t:^— ^ • * h y 
i?, cs s Bf-i-ffcx— * • * h y — A©y ^ F^srs 



a- 



(2) 1 -8 8 8 5 9 



[if**n m^rfcr—? • * h y-ASrSffi-rsj; 5 

(CPU) SrWTS^ 

cDx— * • ^ h!J — ASr^-rstfflEC P UrtW^ l (D 
fl?f£#ai:, 

yXAtcJ;i9, ffllE^Wx-^ • h V-J*%Um^k 
U Bt^-ftx-^ • * b y-^Sr^-rSMIECPUrt 

WIEBf^-fk-T*— • * h y — A§ri|ffiSCPUtf»e>, f£c 

pu^Sfigu$nsflfifa=ivtr 3.-^ • ~>xTJ*<nm2tD 
1 ©flpw^aas, ^HytwiEHt^kr-*-^ • * h y 

— Atfs, WiSCPUd^, ^CPUjc^^tbSSUIE^ 
[if** 2] HfJlEBf^X-* • * hy-^ H£-§-{t: 

ifjfsm2 roWtt#an: J; 5 ^sns^w^F-f^t^— * 

• x b y-ASr«-S-f-S % lffllB$2<DftK#at::»tt£ 
n««»*Sr*tr» if ** l fE*c03£« o 

[»** 3 ] wia^rowp-s^bf— ^ • * h y —a** 

^- • * • * h y — ^.S:^, ltfllE1g-^S§tf s MPEG 
iff^iK^aSSr^tf, it**2fE*tf>jg!g 0 
[it**4] ifflKBS^tS*bfcflF-IHt?*-* • * h y- 
CSSBt^-ftSnfeMPEG^^klT-*— f • h 

• b y — A£MP EG«^-r5#©Sr-g-tp, IS** 2 
[lt**5] j»E«#«astS-S-/>-K^3ir3fillSr^ 

ffiiaft 2 ©»tt^ai*s we*#^- k * r asurt 

mflqSE-*-*, If ** 2 fE*©£!«, 

[11**6] a&iESWMHfc^aa*, wia^©^-* • * 
t, mmm^tr-9 • * b v-A^mm-rs^®^ 

tf, If** l fE«c©=!£«o 
[W**7] tfrlESUff^^a^ flfiiHdr-SrBS^-jbL 

• ;* b y-.A£r, «riacpun:«iKt$*LS«riaj(i 



2 w^jt^w^»fci6(c, &mcf—z • * b y— 
K^fi-ft-rs^asr^** wiEjB2©«p«s#aas, ne 

&1UVf—9 • * b y-A«r#ftfb*SfcU S(flBBSf#fl: 
AtflfflEBt-S-fl^—* • * b y — ASr»^-T5*a 

t, «friE«f*fl:df— *»tti-*#ai:Sr^rtp, it**e 

[§»** s] «ffBSut-mt^a&tj«i«riBSis 2 ©wK#a 
k i •? teffl $ ax * i»-^t/w«isr a* =r y x Sram-r 
5#a*^, i»**iie^w^« 0 

[is**9] «naaw#a*t, s *x*nwr ibi* 

<t*a*»biwiB* 2 ©#K#aicy — K-ra#a 
iwia^!>vo-Kr«#aas, MfHSBt^L^ 
atsfrfam2^?sg#atcop^toi5jiicofc*^, wiEfl? 

Rr^=fyXASrrtf-^fk-t-<5#aSr#tp, I«**8t2« 
oSi„ 

[it** 1 0 ] tfraEajR^aa*, frESflf-^k^aaw 
s^fia»2ro»flE#al!:*^^^•c, Wknn^c/nmr/^ 
=fyxAjt*»&, mmm^k/nmT;u=nj xj>.M&m 
wri^aar**, wiaaiw^aasflfriajB 2 ro«$K#a 
i-, iwiE««©Bf^k/«!S6ryu=fyxA»<ort-c tw 
EWBt^k^a^j: offifflsnsnff-^kr^^y xaizi 

»JC-r5<»«!r^=fyXASr*pb*5^aSr^4p, if* 

*8iEite<D§£« 0 

[if**i 1] ttrfE^2cD^K^a^tfifEcpuF t i^ia 

«ffirSEJB2©«3sas^*y Sr^tf, if**ifa«co» 
Bo 

[if** 1 2 ] 7=-*-^ • * V y —ASrSffi -TS ± 5 »c« 
gJM^ttla^y h (CPU) irff^ayfa 
— ^ • ->^^ArtT?, ttJlEr-*— ^ • ^ h y— ^Sr^a-r 

WfEx-* • ^ h y-Art-cwwsft**^?*-** 

Bt^L, Bf^x-^Sr^-r?., tfllECPUrt^Bt 

*ft:#at, 

->^>^ Aco^3t(- eaM- 5 ^a t , 
[is**i 3] tfjfEcpui^f , untax— ^ • ^ h y — 

Acc*JlS*^*ix-^SriffiSiJ-r2.^aSr^^, ^iisij^ 

a^wsijsnfciwia*^*^-* Sr«na«F*fb*ai;:« 

if** 1 2 fH«w^e 0 
[if** 1 4 ] • x h y - Aa»Bt*flssnfc 

ttfcw-s-fb?*— ^ • * v y — ASrfltrEc p urt-c 

#a^^^, «ria«sii#a*»«fE4©«F-s^k9 , -#' • ^> 



[it i 5 j flfrfa«?ss¥^«w-i' ?a=i— vmwmw. 

1 6 ] iNfE^-* • >* h y -A^Bf-g-fHx-^ 
• * h y— A8r£#, MieSS^. ^ftlEBt-§^t#aicJ: 

*>, ttriHBff^-^-* • * b y-^^^SM-a^ss:* 

^fEBf^-ft^-* • * h y-Aas, iffllEflHWfc#S 
W** l 2 fH«4O3SB 0 

««-f-5^ftSr^tf, if l 2 |E«c(0^« 0 

8] SfllSHt^b^^MfS^-SrBt^liLr 
«f*{t*~«:£fiSU ifflfai*#fc*— XtfiffilBiifF-f-teT* 
WECPUK:»j|*3;h,3lWlE«^cDte&©fc 
fcfc, ^fifl^-* • * h y-Atc#fi-ffc-r5#13:£3- 

MfEBf^f^-£jWfiH-£3M£i£t§r 

=fyxASta>6>, ffiESi£#^»&t>WE#tt#S:fc 
j; Steffi ztiz>f&iHt/mmTA>2ty xj»tt*miR~t% 

tfriaBt^t^i-itiffiffl^tb^Bff^br/urfy 

/i/=fyXAfc$r£tr % If 1 2 |5«c(DS«o 
[M#«2 0] «Ma- y |- (CPU) RXf»CP 

T, 

a) HMKcpuicaawc, wiauff-^fkf*-^ -^.by- 

b) MfHCPUJi-Xf^n^tta^v?^— yUrt^, ifflflEffif 
^Wjf— 9 - * h y— ASrjWSKU dfecox— 

i, 

d) MiaS«f*{tH:tt#, lWfE'>&< t tg|5#ltti£Bt-§- 
<t$nfc7 f — ^S:, liflfECPUa^, KCPUCiU 

e) atrEteSfcttS, suiE'>^< t taj^WJimff^ft* 

fllH^^flfHCPUi-CSIfT^ttSSUfiE^v 5 



(3) fflipl 1 -8 8 8 5 9 

ua>«b, !^CPU(^^^tt5*JlS«3g{^l5j||§ti-5^ 

*»$n^vj:5t-u mfflfc^ik 1 ?—* • * b y 

itt^^SB^^-fbrvwrf y ^AiS^^JW^ 
^nfc^-sHt:^— * • * h y — fltifs^xx 

HfffE^&as, tfJia£co^^-*?r«^-U tftfE 

[»#*2 2] atrEifr^fcSttffcW-iWfc:?*-* • * h y 

— Aa*, CS SRf-§"fc$*LifcMP EGf^-SHHx — * • * 
by— ffiiEHm^yj/T'b) «riE«f#^fcl 
StLfe^F^fl:^— ^ • ^ S y-ASr^fBCPUrtT-CS 

4©mr-^?rMPEGStU WE*©?*-* £ 
V^rSftlS^ra^— ^§rBf-§-fti-f- -5^.7^3/ tftfE 

K-r-B, if *Jfi 2 o lEi&o^fe, 

[if*«2 4] ifjissBt^t^^s/^c) as, tfiia^- 
— ^ • ^ h y—M-c&mwz*Ty7'&-&^ mum 

m*T-yy°e) as, tmfrWfcf— 9 ' * Y y-ASr# 
fi-fbWBSfU, MIBBf^k^-St>*Mfa'>Vj:< 1 

<k*-S:»ttL, WIE^-Srffl^-r, *IfS'>^ < i: ^ffl 

[tf*3S2 6] tfjiaSBt^t^T-j/7'c) astfjiEji^^ 

T-yy'e) iCiOffifflStLSifllEBt^/^T^^y 
&^£j\ If 2 5 SE«<D*fe 

[B*92 7] WIE#F«£^7 l y7'e) as, iW!E'>ft<i 
tgB^Wi-Bf-i-ftSnfcx-^ SrifffHC P Urtf^Sg-T 
S^fyT 1 ^ *tJfSCPU}c:«^^n5*Ifa«5tas 

>*y*jfiS:^*, MmtkmxT-yye) as, sfifs^^- 



(4) iftHB^P 1 1-88859 



[f»#;92 8] fi^a^^y h (CPU) !£CP 

a) tfjfacpud&i^-c, striae— ^ • ^ hu—ASrS 

C ) wtEBt^k^xs/^b) iwia*f«tf f -*' 
/ci-tSrflfifEHt-i-ft:^-^ t lt, flfjiacpua»£>sscp 

a) WEcputcseiijtsnssfriBWiJS^bflfnaHF-i^t^ 

CPUCO^g|5coMIE«ig— ^L/^mi-^L, Mia^ 

co^— striae put^cpu^iggsnsflfnaflf 

SWIE^— # • h y-AcOfWiaafflMtx-^Sr, flUfe 
CPUrtTf«aiJ-r*^9 l y7'Sr#tp, i»*9 2 8 ia«c<£> 

[»**3 o ] • * b y — AiSBff-g-ft^— ^ 

Wimmn^mb. mfs.m^ty—9 • * h y — astjw 

WW-a^y UtrlBffiF-S-ft:^-* • ^ h y-A 

[»#*3 i] StifEBt^>ft:^x^7°b) a*, «»J3*l*: 

Sfria^^^s/T'd) i^tfe-rs^^^t?, it* 

[MT&93 2] MfEPt^-fk^^s/^b) asflftBE*-arRff 
Ht^fkf— ^ Sr, l»IECPUfc»«Sn<5fl(l8a«Jt^© 

VStrlEPt^t^*-^ ^yyT'i:, fltflBWUHt 

[»*«3 3] a[*«)T»3eis*nfcrtf^is/*ttr/i' 

S^fyJ'm, tfrlHBf^t^T-^T'b) as, aigis 
XASrffl^t. «»J*n*:lWia*f^Mf*-^Srl**ft: 



[«*«3 4] h (CPU) &T*tfc=-^ 

f*i-c\ m^tf—9 • * h y -A&&a-r£7t«>i-<ftffl 

• T'o^^ASfpTJiot, SfjlEC PUic^-ctfrfEBf 
JHIst*— * • ^ h y— ASrgmu SfltBCPUrtT'SfJiB 

mmtT*—* • * v y— Agrflfgfcu ^co^— ^§r^ 
u tt^iof*— ^aririEcpurt-rSBfF-^ku 

fctw^WJcuif-^tsnyk^-^Sr, sftiEcpua»e>tt 

CPUIi:««$*T,5lMrE«iefcteiSr5, avifa- * 
B^ttJfSTtg^ni/^A • a— K#fftt, SftlECPU^ 

— ^as, WIECPU^^^cpufc^^HStfrEltiS 

[ts*9 3 5] mmm^t-r-? • ^ h y-A^, nt-^ 

^tS*L*:«F#ft^— * • ^ h y— ASrS-*, SfJfS=i^f 
S ixfcT"*-^ 5r«l^-r 4 SflfE a v t° » ggi±J U 

[19*93 6] wiBBt^bsnfcW^b^-^ • ^ h y 

— A^S, CS SHf^-fb^HfcMP EG^-^-fk^— ^ • ^ 
h y— ASr^#, iWriEl*^tSixfc»^ft^— * • ^ h 

s snits^yf a— ^ggmL"rtB7*o^^A • =— 

X h y — A&MP EGS^-t^ayfa- L "Tfig 
yc^A • a-K#SSr-a4f> if*9 3 5 IHtfecon > 

[IS*93 7] >f*ji!lla^yh (CPU) SCP 
UO^«Bmis>o-CttCPUfc«iM5S*LS*Jti:Srsfi-ra 
nyifa-^ • ->xTJ*?iX\ f—9 • * h y — ASrM 



(5) <&ffl¥-l 1 -8 8 8 5 9 



*ftU «HHfc?*-*S:£fS-r5, a tr — * Kffl l_ 

SfrlECPU©^a50S(flB«3g^©teiSro«, tWERSHHfc 
iftfEdfeWx-^a*, iECPUt*CPUl:» 

• i^^A^^Sf a^f^.— 

[»#*3 8] mm?-? • * h y-AoijtriBiFtfMiT* 

^Ii7-o^7A • a - K#«S:-&tf, 111**3 7fS«cCO 
a^tfa — * • 7"P^7A|! n B Po 

^-#Sr, «fECPUH:*iKiix5flffia«3t— oteiS 
tit L> UtriaBt-^t^-ArjefltlEW^C^-^ m L, 

—zmm-t -savbfa— ^DtuuBr«B7'o^5A • a— 

K^SSr^tf. »**3 gfEigcWa^fc^— * • 
[»**4 1] WSIJSttfcWE^fWi^-^WBt^fli, 

Wn^yA • a— K#S8r£*, flfrlEPt-SHfcx-* 
SrWtt-f-SiMrEavhra.— ^ttffiL?r«B7'D^5A • a 

!S'»WL^ri)B7'o^5A ■ a- K#«fc£tr, §1**3 

[0 0 0 1 ] 



^■fe^^rte*«5S»-*jv»r»(r*-«^i:*<, cpua> 

[0 0 0 2] 

(DVD) tf^Sr«Wr5fe«>i-tt, ^ 

[0 0 0 3] H#<DSW(C<ti9lS-&fetl6ftiiJ^$r^:flS-r 

[0 0 0 4] S»Lfcl^J*-EBffi«*©lO©«tt, M 

PEG (Moving Picture Experts Group) M$§-"C$><5 <) 

MPEGititjB, e^ffifsast^^rt&t^^ 
mix, suRa-iNf^**, *^Ht, ^r*ft«F^ft, #t>* 

?<?-*rm<D vr7 ! ^-mm\-i. "Shz^-m't mxtiz^vt 

•fey hro**SrESB-f*fc«>l::«fflSns. ISO M 
PEGaSftit try h^. h y — ^co«5:st>*«-§-7°D 

[000 5] fv'^/l'-^t^'f/V-f'f^^ (DV 
[0 0 0 6] DVDttlfx^-, ^^^T>'(-, DVDff 

7 ! ~9t \^xmm$ix%fa(D&.m7 : -9 <Dfomz.tt-tz> 

(I SO/I EC1 3 8 1 8 — 2) d<fc <0mfe£ftZ>o 

SS (Content Scrambling System) Sr^^^TBt^b^ 
tL, -^ni-ct t) D VDS^(D7c&!)CDBt^b^tbrc?9-§-'fk 

^-^ • * v y — ^as^^HSo z.(dt ! —9 - * v y 



—Ate, cs so?K&^tf^afc«>{cB-sr$tt/c^— k 
^TMJ: !9#PKS*t#«o css^ggtePCi 

# — KK*5V^*fT PCI*-KI1II^ Bf^-ft; 

[0 0 0 7] 

co 1 mm\^^x, m*Ht&tiitWM£ j f—# • * h y 
— a o r co t$ j£ d v d m m % $c m -t* 5 r t x&> s 0 

[0 0 0 8] 

[R« fc»tf>^»] ^PJte^l 

±5*-»f«*ttfc4 j *aa^=y h (cpu) srw-rs 
j*&&mi~?>mm$:<e;&o Rem*. s«stifc«f^b 

* h y— A&£/*+5#tt#s&+*&g^ y m*h- 

cOIr — * • ^ h y -ASrSBt^ffcU BS-S-fkx — * • * 
hy-ASr^i-^ 0 ^co,£T\ gfSSixSflf^tT*- 

^ • ^ h y - Ate, SBt-^tr— * • ^ h y — a <b nm 
**Bff^fkr/w=?yxA^b^5tbS 0 ffitw- 

^ • ^ b y — Afc^toaS^—y h^fe>, R^-s/ 

ssjasns^^hfa— ^ • i>^xA<D^2<Di»it^te^ 

^co^— ^ . x h y-ASr^f5o £<£>x — * • * h 

y— Ate, ty&&m^~y bfrb&^~v b^mmzti 

[0 0 0 9] SiJ0>JB«T?tt, x-* * ^ h y — ASrSff 

^ — ^ • v^xAft-e, BE-r— * • ^ h y— ASr^S-T 
saSfiaMStftS^So K3£«te7 f — ^ * * h y-A^co 

fro S^ffif-S-^— ^SrfpAMa^-s/ h^fe, tS-^— 

5/ h^SfjgE^tta^^tfa-^ * v^^^A^^^te^ 

[0 0 10] ±^Ki|ftS^fcffi«<0*4r»2:»-rS«4rJi 

[ooii] BflKfi^Stfs, *«Mt-J:ixtfH £.<Dt*— 



(6) 11-88859 

5§rt^&i-awtdsffprsn>kv\ **iBteWc, r 

\z*fit **r4?s9 (D vd) ftflffciftc: J; 9{£ 

5. i^, «efflsn5«rte<oB(f-^t/ftittr^^y 

m, ^m^iy^—^n, ^^mm^^^ b±xmrr^n 

iKv^te^^a^-^s/ h^^n^^TA . 
[0012] 

[«Woiafc^<B] -JRW^, *^P^te, Witfcs 

^^ry ^y sfcte^^A • ^^^^o, cp 
u^^cor^i?^«rtg^fiSco^3grtr% ^ 

s sflff^t^ h y-Acoyy b *.Tmffi&-^m^-t% 
h y - A(oafe/^^^s^^^V ^ h ^-fcv^T, 

Wtfte, B^hy^USfc, MPEGSfe (IS 
0/IEC13818-2) SrfflV^XJEJieSixfctr^^ 

[0 o l 3] *%MMJ:ntf, hrtc^S 

—9 • ^ h y-ASrBff^b-r5 0 r^^ftte, fi^co 

K!?^r»«cc)-**/cteW*^mi-5JWflfri-^ 
^r^^t^o h^^r • ✓us/cte^— k 

!>^rafiH<o— *-*fctew*te, srtf-i-fkx— ^ • ^ h 

y-A§r§:{fi-5 ^ctc-eco^-^ • ^ h y-A^«? 



(7) 



11-88859 



[0014] K-rs^, ^r^snsftysKra, -s# 

t?, nw^afflsnsnittr/u^yxASre^a^^j/ 

(DjtTtmn-rZo f-tt it, nM^^F^f) 

[0 0 15] Hitt, 5««&tt/B-r5=i > 

^x^ofp^s^^i/ h (cpu) rt-cig?T£axs 0 

«L3S^^y h •✓n-K*~TS«3 0 if) 
^ — ^ • i/*TJ*<Ds<* 2 6 CO 1 0±^#^£ 

i"5o h!>x7 • ^i/a-^l 0 i: 2ft&iy 

o 4:<?5ra(Oii(Stt % c pu l l <^^gS^iEBStL5> 
y 2 5RXfis*TJ* - ^2 6 &^t8r- ^tei^Srl? 

(CSSflfKfciT) £r^£r 0 2Wiy7h^x7^ 

2 7Mf-^Wt2 8&^fr 0 
[0 0 16] JBR*6^— ^tt. W*.a^lB«ifill*fcH: 

h i i^$ij*-r« 0 r^T*— is&fcffl^a* 



£>A*K:(Ej££n, x — ^j&a^frv^— ;U2 lici^^ 

i^^o net, «*.tfrntt, csspt^tsftfcjDK 

^t7;^yx^, i"*te*>cssBff^ffe:JK^(OBiF-^t: 
7/^yxA^ffl^tS0f^ft$n^o s*y7h!)x 
r • ^e^^-^i o%mm~t im-^-fc 
• * h y-^^/'tiPt^x— ^ * * h y-^§r 

1^11*67*— ^Sr«LaU flff-S-^v^— A-2 2^Bff-^ 

^Jx.tfBt^T/Vrf y XAtt, B. Schneier^iS'Appl 
ied Cryptography"^ John Wiley & Sons Inc. ^ 2nd E 
d. (1996) T^bn6^^7*tfcSo 
[0 0 17] ^2(D^r— ^^tt, t"— ^M^v^a- 

2 2**<D*f^ffl^ftWiaw«^»w*^fbr^=ry 

Bff-SHfc (trans-encryption) fciqWbSo ffcV^ttx — ^ 
KU Bff^t^e ^3.-/1^2 2dS5u3KBt^t:SiX^:*fP* 
tt, WW^fc (layer-encryption) Pftttt*c W*J* 

^Art-cttfflsnsw-s-ftr/u^yxAds, jok^t*— # 

^tr/w^yxAoffifflS:«r«B^u -tn»-j;9ai*«ai 

[0018] flt-g-{ksnfciFfPtix— v/^t-^s • 
y^ey 2 ssfctt^^A • ^^2 6<^)-^^fc^fSj^ 

SrilCTte^^tL, ?E»2Miy7h!)x7« ; e 
0*fcttftiffi/N— K^*r3Sfi3 0{cj; 19 §: 
ff^n^c ±^^>J:5i-> 2Wiy7F!>x7^^ 
a-;l/2 0(t M^^a-^2 3X^7-^^!^^ 
a-/U2 4?rtU Ml/N-K!>x7il3 0H 
^fi2 7&^7 ? -^MSI^B2 8 5r^«> 0 ^if^v^zL- 
;u2 3Xt^j)¥BK3SB2 7 ft, Bf-^k;*' iP^.— ;V2 2 t-i 

[0 0 19] Bff-g-ft^v^a— ;U2 2Xt) c Stt ; ev f a-;V 
2 3 «fett#K8t2 7) iC±f9ffiffl*ix«Pt-S->fk/ 
WttT/l^y XA*T«\ S*y7h!?*7-^a^ 

i 0M2 Wiyy h ?x7 • ^a-/u2 o 



(8) 1 -8 8 8 5 9 



[0020] Wx.il flf-g-fl^v^ — yw2 2tc*a*ji* 
SlJ^ffifflS*L5o Bff-^ftt-Stefi"^ Bff^t^e^a.— 

2ttff#€r»»*^ 3 .-/U2 3*fctt#tt««2 7Ki£ 

«U *ttfc^Bff^t*^^— /U2 2dSffiffl-f-S4*je<o 
T-/u=fyX^Sr*qfci*:5 0 r oft #tty 7 h V • ^ 

ZKDMtth&o 3RTfmmmw2 1 

ffiffiT/vdt}) XA£{£fflih3o ^^r^^yXAcort 

[0 0 2 1] i&VMl flf^ffc^ev^ — ;i/2 2&t>*£?i^e 
S^-/U2 3 (Sftfi*KSl2 7) ^ flathaWJ-* 

tt, ffiffl^5^BR^Bf^t>RrJ«»Kryu^yXA^S:«: 
tt5o Bf^t^^a— ;V2 2 tt«|iOBS-g-ffc:r/U=fy 

XASrfflv\ ma^i;a^2 3*fctt#esE3fi«2 7^ 

2 3*fctt»»3S«2 7^eiS-*-5o :l<bW«<oS«K 
»Lr, WBE*^^— >rW2 3*fctt»tt»«2 7 tt#fi 

yu=fyx^sr«tt-rs 0 ^^^-^2 3^^ « 
tt*ixfc#fttr/v=fy XA^/p^-^t^ffiti l 

TteJHU *P»»«2 7ttWBKr^=fyX^SrS 

jV2 2ttHR<OBff^kr/u=f y XASrfflv^ t*— *Sr 
WHHtSU *ft*R ; e^a-;i/2 3 4fctt)»K3gl2 7 

£\ »*5Bt^b/*ttr/u=ryxA»35s»KSix, Wf 

^ffc^v^— yU2 2 3S#j£i-S<#SK7Vl'=fy X^S:#p|K 

-So 

[0 0 2 2] Wtt^||fTSixfe«^ gfg^—^flyg^ 
[0 0 2 3] H2H Bl 1 c^BS-ffl^T, 



10 (IU1) dAX^tb BB*&$tb5o 

KSns^Sf^&a^vg^^jBfi-s (777X5 
o) 0 iKK;&sj££^»£\ fJf-SHb^-^ — ;V2 2^— ^ 
Sria», 2WIV7 h ^xT • ^rv?3.— yu2 0*fctt 
ftta^— K!>^r3fiB3 0{e:e^-r5 (^r;yX6 
o) 0 DVD7Xy^> 3 yTU S*yy 

h • ^ev?^.— ;u l o a, ^^^fiS^av^-r a 
(CGMS) ^-^^ISSE-r^r irdST#5 0 S:ff^- 

Bf^ft^v^— /U2 2^bft¥^v ; ^^2 3*/ctt«P 
[0 0 2 4] #CK, Mf«7;^yXA^^r>yp 

y XA^§^e>^— /U2 3*/ctt»K3fiB2 7tcX^ 

[0025] #pSKTyu=fyXASrfflfcfi:U^:«, Bf-SHfc;^ 
^1^2 2 a**— SrflPSE^ev^ — /U2 3*fcte#?K3S 
B2 7tc>f5igL (^rj/X54) , *— AVPf^bryu 

=ry x^^v^r^ffi^-^SrBt^t-rs (*t^x 
^hy-^itt, A.^^&y^ 

X5 6T, WSK^v^a— ^2 3*fctt#fSfc3SS2 7tt, 

iSWSfett^^^p— KSjxfcTyurfyX^Srfflv\ ^ 
— ^8r»tt-f-So flf-^b^e^a— A-2 2^Jte^ BS^b 
*— dSH»f$*L5-<#^5^S:*iJ»f-r5 (^r^/X5 
7) 0 JSSfSixS^^t^v^^ Bt^fHRV»««ta 
^fs/X5 6^Sjftt)igStt5o S^/SCTI^I 

-oWF*{t*— h y-*ei£oj»t>*T? 
7^e»sns 0 

[0 0 2 6] E|3H H2^7 1 s/X5 4 73/^5 7^^ 

i"o Bff-g-^^^a.— /U2 2rtlJltt > *— ^^c*^^— 
7 9, *— ietft^^a-zl/S 0, T—^m^t^riy^- 
-;i/8 1, RTfT—# • -^vu^Xi^-y- • ^^a-zus 
2#t*^5o ^r-«^^a-/l/7 9ttJSte*— «:£ 
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o^f-^ • * h y— .mcj^u m^^y ^t/^ 

SESB2 7tt, ^ • ^VU^^l^lJ- • ^t^a-^ 
/SI8 4, ^^^a^/Sg8 5, &t>*^- 

[0 0 2 7] 0 4tt3Sic:, #38?m-t* 5 *&3S<£> lSSlfiM 

[0 0 2 8] i^ffiMWKB:, bfs^ h • * h !J-AiSDV 
U7*JX? 10 0^b*^h» 7'ntyfl 1 0 t^gfctH 

DVDii^fftS (112) 0 «<»f 
^D-fe^Sr«»i-Sfc»^ ffiESJRtf^IEBfriL (ta 
mper resistance) T/UdtyXJ* 1 1 4^ffiffl$^# 

ffl^r**Bf^b/»»r/u=ryx^, ti^cssff 

6) 0 ^COSBt-^^X-^^, WitfMPEGtfftf 

2 8^^colg^{^E^^ti6o *Ktt*fiS-r5 
tf y h • ^ h y — A&?§?W ^ p KSr^tp-^>r ^ p 
rx — KCOP-K (12 4) tCggV^T, fi^Sl 2 8 f^T 

y— *&i£3EteU#a 0 

tf^ • y*— * • ^ h y — A£^4# s l 

X — ^ • * h y-A^DVD»iMl 1 2MJR#, /> 

2 0(7)lo^±t7)7^-;PK^\ tfyh-^hy— 

W^flSftkffll 1 6^t¥VNBf^tSix5o 1 2 2 

^^na-K'P-Ki24i:Pli, tf • V s — 
^ *^hy-At-ffl^ tfx^ffi-S-Sl 2 8rtC0tfs/ 

h . * h y — ^ARifta 126 \z.mm£ft%o 

[0 0 2 9] ±J6a>IM&J&»6>, #38 W 

tfs h • y ^y • /^7r*fttt^7 1 A • 

t'f^^^g^^fa^ffiffi^n^, MPEGW 



T/urf y X&co&tcte-r'f ? p ^— KStp— Ki^^Sc 

yx^tt*>fbM#5o a^w^tt, • y^h^^ 

a o htt&i-, mtytefmH^-l 9 p K • p— K 
O-^^f^Prr— K- p— KSr, ig«I**— i: 

* i^in tz. n§if/>- k^xt i^s t-^s 

[0 0 3 0] JS^a*#t?fc^i, 

Hi* «r«fltx ws« 5 a > bf a - ^ sgm L^rtg^ o p 

[0 0 3 1] :^TvtJ^c7p- Htt. -^JirLrii 
[0 0 3 2] iZbtbbLX, *1tm<omtfLfrWl,XElT 

[0033] ( i ) nwc*f<-9 • ^ h y -ASr^t -r 

^i;5^$^nM^5/h (CPU) Sr#r 
^tx-^ • * h y — A&a?ggu ^^t 5 — ^ . ^ h y — 

^fir±«i-SStrlECPUrtO*l(0»R#«i:, lWIEWf 
^ty*— ^ • ^ h y — A4rtt**5Bt^tr/u=fy XA 



do) mm'- 



^t-r — f • * bV — ASr^i-SflftfSCPUf*30f?»f 
*Hb¥&k. tfIf2B&^7-*-^ • x h y-A£SUECP 
U^b, !£C PU^fgMS^nSSUE^tr a. — * • ->x 

fA©*2o«5Sj!:(eafe-f-a#ai:, mess 2 ©i*3ia» 

ibSUERf^Htx-* • x h y-A&smu %%iwcf 
-9 • * bv -j*%mm u sue^w^-* ■ * h y — 

#a&«r£*, lWflECPUi*j©iWfa»fi 
£« $nfcSUEfl£^-ftx-* • * h y — A»<WRSrim 
i--5-*r% SUE^w^-* • ^ h y —a as, SUEc p 
u^f>, ttcpufc«M*Six5i)traEJB20fl|jgn:(i2a65 

(2) flfifEBt^^-i? • * h y-A*5 % ufr-iHfcsnfc 
ftwtf—* • * h y-A*^*, stria««*», suei& 

— * • h y — A tfJlE«^^ M peg ^ 

«-«Mi«r£ir, stria (2) Etto&IE. 

(4) atiEflHHisSftfcWS-fl:^-* • * h y-A^, 
cs sBt-§-ft:$tbfcMP EG^-^-fb^— 9 • x b y— a 

^tx— ^ • * h y-A&suEcpuft-?cs smsh-s 

#a«r^*, StfEtK-^tflfflEdfcOflFS-ft:?*-- * • x h 
y— AS:MPEG«^-*-5#gkSr^tp, sue (2) is* 

(5) W8E«*#*s**^-K^*r»B*^*, SUE 

82 ©«H«6#aasflrEtt*'N— K^ir^trti'ffit 
5, Stria (2) fs*cco=g« 0 

(6) flrESHfr^fc^aa*, SUE^cDt-*--* • x i» y- 

StrE*2©*W5^|ft3SSi)tfE*-SrfflVNr, SUE 
m^tr-* • * h y-AS:WWEr<5#«Sr-&tp, SUE 
(1) E«cW^«o 

(7) StlE?5«F*fl:#a*s, flfrE*-Sr«F-^bL-C«f#- 
ft*- Sr£ritU fltrEfllF-^t^-AtWWEBff-^^-^ 

*JECPUK:*itt£*L$llfrE*2<B* 
it^cDteiHro^:*^, ^mYJf—^ • X b y— A{c#fi 
fc-*-S*a«:£*, lfflEJB2<&lWI«#aa*, StfE^S-ft 

t>*SUERf^ft:x-* • x h y-ASra»i-5#«t, SU 

EW#^t*-ar»WE-r«#atS:^«f, SUE (6) Ett 

( 8 ) siiEs«nHi:#»,ft uwrEm 2 <nmm ^a;c i 19 

Sr^tr, SflE (l) E«<D*gfi 0 

(9) strEaiiR#«**, aw^n^WEie^-ft/wttr 
yu=ryxAjt©»«ryi/=fyXASr, sUESuf^ft^a 

*» SUEfS 2 ^ * ^ n - K-T 5 #a 



ipl 1-88859 

Sm«2<D#lJ^afc<BM<&*5j£eofcfc»::, SUEIWSgT 
/u=fyXAS:«f*fls-ra#«Sr^tp, SUE (8) Ettco 

mim&iYSwmT/vdty x.&*f 5 

#a&£*, StTE»W¥gkiS*l»EJfS 2 SU 

E*««)fliF^ft//liRr^=fyxA»©rtTr, tdiEffis 

**Str^=fyXASr»6*5#aSr^fe, SUE (8) 

E«co^B 0 

(id i)tiE«2o»i«*is;3»smrEcpurt»cE«sn 

Sf2»«jgasyey Sr^tr, SUE (l) IEt<ogt„ 

(12) t*—^ • x h y— A&gffi-*-5,fc5teflM*3;Jx 
2.^*Ma3.-s/h (CPU) S;flt5a>fa-^. 
WTArtt, StJEx-^ • ^. h y — ASrMa-r^SB 

-r-fcoT, sfiEx-^ • ^ h y — Artt?as"j$n5*fp 

PUrtOBf^fb^Sfc, SftE^M^-^fctl-SrStJEBf 
^•ftf-^tLt, StTECPU*»fe, BECPUlcSttS 

t, lWEBt^^-^argm-rssffEflisi-SNMssn, 

flflEBff^k^-^arWBB^-S^aSr^tpWflJ^ai:, S: 

(13) SfJECPUf*3t\ StlET-'-^ • x h y— AOJW 
E^fWi^-^SrWSiJ^S^aSr**, tt«S'J#ad»l« 
SiJ $ti>fcSUE*^ffi7-*-^ SrlWEBff-^k^a^aeift- 
5, SUE (l 2) Eftco^B, 

(14) SUEt-*-* • x h y — AdSBf^t^nfcW-^ft: 
• * h y — AS:^*, SUESfi^, SftEWf^fkS 

tbfc^ftr-*— ^ • ^ h y — A§rSUECPUi*l-?$?K 
L, ^©W^fl:^-^ • * h y-ASr^-#-5*tt#a 

Sr^r*. ffiEW3ij*aasatfE£©«F-i§-ffc?*— # • ^ h y 

-ASrp^L, SUEBf^-ft^a^<t5«f^-ftcD/ci6{c:« : 

f^Mf-^&wsij-ra. sue (13) e«co^b 0 

(15) StfE»tt#a**^^ ^ o K«P«E»«ar^ 

tt. SUE (12) E«©gf„ 

(16) sue^-^ • * v y -A^Bf^tx-^ • ^ h 
y— ast^*, utrEsa«*J, strEflf^t^ai-is. m 

SiJ^nfcSUE^Iix-^coSUEHf^k^^ii:*,, SUE 
9 ' * b y-ASr»Ri-*#aSr**, SUE 
m^tT*-* - * hU-A^ MEWHWfc#au:J;?>& 
^Sc^ixSSUEBt^-ft^-^ t tt»*5Bf-^trA'=f y X 
AA^4^Sjx5, SUE (12) EicOJSfi, 

(17) SUEBt^fc^a^ aS'J^nfcSUE*^*!^- 
^wSUEBt^fti-*3^r, &T>*SUEfi?^#a^J;5, SU 
EBt-^f*—^ 0»«50*i«>fc«ffl ^^5 *— SrtiW-T 
£^a&^ti\ SUE (12) E«cW3S®c 



(11) 



(is) mianf#-fb#»a«fl(ria*— ar«f^bL-c«F#{t 

^SrtbKBfcU MEl*^IS*— AtflfflElfc^fc?*-** 

tr, iWfIB (17) IE«0^g 0 

(19) **«)^ii>3eilS<xfcW*ftl/*P»!r/u=fyX 

m^t/M%tT;u =f y X A*t SriliR-T £ & 

MEWHHfc#«ii: J: 9 ttfli $ tt« uf-sHfcr^ =f y x a 

yXA££^£p, flfJE (12) IE«W^Bo 

(20) tf^waa-a-s/ h- (cpu) &yscpui:g 

a) wfficpumaa^-c, fflfiEWUHb^— * -^hy- 

b) tfffBC PUi-fHtf^nS^ev 5 ^.— WEBf 

c) waa*©^— ^SrtwrEcpurt-cBBt^tu '>* 

-fbSJWci^-^Sr, WfHCPU*»f,, KCPUlc««$ 

e) mriB4E%l^M« . WiE'>&< t tiw^wi-ie^t* 

u*»e>, ttcputettittsixsjfflEWiaKitea&sttsR 
»ll£*ifcv.fc5U:U ffiEflHWfc^-* • * h- y 

-Aas, striae < t tg^^^Bt^k^nfcT-'-^Sr 

(21) wiant^iif*-^ • * h y-A^st^t^n/c 

e) ^4ro^fkr-^ &4fiS;t 5 ^ f j/ ^^^^ ffl 
E^i&as, jWE^oflF^ft^— u Sfrfa^cox 

— *Sr^-r*^f i y7'Sr$tp, fltJE (2 0) I2«c»* 

(22) Mmm^t£titcnwik<r-f • * h y-A 

a*, CS SBf^t^^fcMP EG^^-ft-^— ^ • ^ h y 

— a&^, fflEWR^s'T'b) as, UMSBfr#fl:£*b 
IzMmVf— * - * Y y-A5rflijgECPUrt-CCS sft? 



!RMff|5pl 1 -8 8 8 5 9 
SK-TS^^yT'Sr^, WE^t^T- y y'J>\ lftE£cD 

-rs^^Sr^tp, ftfrts (2D fEScw^fc 
(23) fflESflHUt^s'T'c) as, s-javvriw 

as, fliIfE«?^x^ ; y7 0 e) rofcftlniWria'*— Sr«#fi-S 
^x^'Sr^-, flGEAH**? l s':7'a s tflE'*'— *rfflV"> 

SftlE (2 0) fagcW^fe 
(2 4) WIEff«f-§~fk^7 l s'7'c) 1»1E*— «r«H§- 

j/T'e-) as, m&mtT*-* • * h y-A£#a<b5? 
Sr«?ttu tfriadf— ^fflv^-r, tfrE'>*< ttSMMtte 

(23) fEifficD^fe, 

(25) «»©^»3&S6*n*:Bt*fli/*W5r^=ryx 

y7e) \z.£V)$imtitizm^k/mmT;u=ty xa*t 
^il^i-s^xs/^Sr^-tp, ttrta (20) iB«c»^ffio 

(2 6) tfnESWHHk^j/^c) frMmWVl^Tyy* 

zmnv. m^mw^T yy'iK m^mm^^yy 
w^sgr/w =f y x a & ^* ^ v 13 — b'-f i> * t y 

tP, WE (25) fB*c£>}f j£ 0 

(27) wKum^fs'^e) as, mft<j>t£<bt>m& 

yT'Sr^*, WECPUJ=:«itt*ti,5MEfllJtasp' i ey 

wjsst^*, iWE*sB^yj/^ , e) as, m^^vmm 

itS^fy^^, ffiE (2 0) E*<o*ffi. 

(2 8) WM3.= yh (CPU) t, fCPUO^ 
gBCi&o-CfSC P Uic^^nSPjtt ^w-r-s =3 ^ t' 
3.—^ • WrA^t, x— ^ ■ ^- h y — ASrAOiS-r-5 

a) ^^^Ecpu^c:*Jv^-t, fifrE^-^ • ^ h y— A£g 

b) muf—* - * v y-Art-c*iiS'j^n5*^iiT-*- 

c) wEBt^t^x^^b) tc^^, Mmmwrmf-* 

d) 9fjEcpu^«^$n^>sfrE«jta^sfiEBt^-fHT J 

— ^Sr»*U KBt-S^t?*— ^SrWttUr, ^cd^-^ 
Sr^-rs^xs/^i, Sr^*, lWElWK^fyT'as. 
lWEie^ft:^— # SrWEC P u<Dfi\>M(Dlft%?.ffim^&'& 
Lfc«l!:*4U SflE^cD^-^as, fltfECPUt^c 



(12) 
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(2 9) WEBgnSHkxxrx^b) (c:J;i9<sKffl£*i5WE 

x-^ • * h v—j*<DmmmvEm j f—?*, wecpu 
^x-m^i-r^^r-yy^ts: mm (2 8) e*<»* 

(3 0) WEx-* • ^ h V—Jxfrm^tv'—'? • * h 
MlZ-VcyLh, WEBf^Hkx-* • * h y-A^«¥gg-rs 

^.^s/^Sr^, WEBf-^kx-* • * h y— str 

^tr^=f]j x^ib£/&$ns, WE (29) E*ctf> 

(3D mmm^t^-yy'b) mi\zti±mmm 
itm?-'—* %*-%m^xm^tL, we^-^wea? 

\'mm~tz>*T-y7'z-B;t?, mm (2 
s) mm<o^m a 

(3 2) WEBf^kXT-j/^b) riSWE*— £B£-5HkL 

-rWF-§-^dr-sr^L, mmm^itz—jkxzmm^ik 
t 1 —?*, mmcpuKmifiiznzmmwm^nifcmcD 

7-$r^, mmm^^-yyd) as, mm&mitf-* 

m^k7*-*&mn-fzxif-yyk. mmm^t'r-* 
(Dmmn fc # ^ffi -r 3 weh& ^Hk £«ss-r s^-r 

v^b&Htr. mm (3 1) 

(33) *»o^«>)e*$*i,fcWF-^ft/»fflsr-'V/=fyx 

s> mmm^t^T-y^b) jS^^ttfcflfJ 

mvfe^k/ffl&Tji>3 y XA*frouf-!§-<ffc7Vud r y xa & 

WiJ3frfcifflE*tfM*^-*&l*^tU WIS 

^Sr»Ki"*^ys'7 , Sr#rtp, WE (2 8) IE 
(3 4) cf*MS3.-s/ h (CPU) &t>*f£^— s/ M- 

* r ?.*.Mi&-e*o-c. WEcpuKfci^-tWEBt-i-fkx 

• * b y-ASrgff U StfECPUrt-cmiEflf^ft 
x-^ • * b y U 4©f-^ Sr^j* U 
^cDx — *£WECPUrt^SBgH§--(t:U '>&<irfcgB 

HiLWo^A'a-K^li:, fflfE'>>S:< fcfcffi 

^(-Bf^t:$^fcx-^Sr, «riacpu*»bttcpu 
i-«M*£ftaiWE*j&teiEa&-r5, ^mmL 



#KfflLWtJ^5A • =r— K#«i: WE» 

K^stiEcpu^f^-rs— *x\ WE^ro-r-* 

AK lWECPU*»&KCPUI=:»ltt^ih.S*rffi«jfil!:te 

(35) sfrfEBf^HkT-*-* • x h y — nHHsstt 

fcft-^kx-* «;*MJ-At:£*, WEs^t?^-* 
• ^9 WE'>&< i>m##)\zl$qrfc£ 

tifcx- * ^«¥iS-r 5 WE =» V tf » — 9 SSfcfci L "IffiT' o 

K^SSr^tP, WE (3 4) §E«co^>t°3.-^ .7*0 
(3 6) lWEBt-^SnfcW^t^— ^ - Xhy-A 

as, cs SBt^k^tv/cMP e G^^-jkx— ^ • x b y 
-a^^^, WEBt^-fksnfc^^kT-*-^ • ^ h y- 
^ sr*i«s-*- * mm 3 ^ tf 3. —9 mta l «rti = - k^s 
a«» ttiEBt^-fk^tbfc^^kx-^ • ^ h y-ASrcs 

v?7j±-=i—h'^®%-£tr. mm (35) e«c>3^ 

(3 7) (CPU) KCPU©^ 

JBJ^fco-CttCPUjciajlJtsnafllJtirSr^-rSavtr 
3. — ^ • y^f Aftf, x — ^ • X b y — A%*!iS-t-5 

>fc*3.— * • T'o^^ASSfo-r&oT, iiECPutjo 
v^iiEf-^ • ^ h y-A^gfiL, fgx-^ • 7, h 
y-Art-e^sij^n5*^x-^^Bt^kL, st^k 

■a-K#Si:, WJEBS ^k^-<^ Sr, (WBCPUd>b 
ttCPUO^ffiofltfEHHS^teafe-rs, 3^tfa.-^gg 
aiL-STtg^n^^A • a-KfSt, WECPUCD^B 

<Dmmmw^<»fcxk(D'<k, mmm^?*-? *wimi.x 

mm-t2>, 3>-f 3.-^»?(iJL^7 - n^9A • 3— K 
Sr**, flflE^Wx— ftiECPUt^C 
PU(c^$nSSflE«3girroWcD|5^lc:^L, WE 3 

os) mmr-? • * h y-A«otfiE*fWi5 ? --*8r 

A • 3-K¥SSr*tf, WE (3 7) E«c<753^tf3.- 

(3 9) gffiSlJ$tlfcWE*^*tx-^&Bf^k-r5WE 
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rx^lfa — ^ffiL*rt£:7 0 n>^A . n— K#a^, * 

• 3— k#®St^4>. atria (37) tettcon^ 

(4 0) 1ftfdM&fc<Dtc#><D=i ^KttJLBfiE^ 
n^9A-a— K#S^ WIS*— SrWF^kLT, 

1-, #fi^x— ^ • ^ h y — j±\z.g,mik-t&=* yta- 

- * <0#fgg£> ft: » -f- 5 tfffSBf JHk 
tti-aa^bfa — #amL"T«e^n^9A * =z— K#a 
S:*tN SfjfS (3 9) iE*<0a Vtf^-^ . ^n^5A 

1p°Po 
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i . Title of Invcuticn 

APPARATUS T METHOD AND COMPUTER PROGRAM PRODUCT 

FOR PROTECTING COPYRIGHT DATA WITHIN A COMPUTER SYSTEM 

2. Claims 

(1) Apparatus fcr processing a scrambled data 
stream within a computer system having a central 
processing unit (CPU) coupled tc receive the 
scrambled data stream, comprising: 
d e s c r a m b 1 i n g means within the central 
processing unit fcr descrambiing the received, 
scrambled data stream i c produce a clear data 
s t r e am; 

re-CDcryplicn means within the ceo t rat 
processing unit for re-encrypting the clear data 
stream tc produce an encrypted data stream, 
wherein said scrambled data s:reara is produced 
from a different encryption algorithm than said 
encrypted data stream: 

means fcr transferring the encrypted data 
stream from the centra! processing unit tc a 
second structure of the compete: system, said 
second structure being ccupied tc 'he CPU; and 
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decryption means coupled tc the second 
structure fcr receiving the encrypted data 
stream therefrom and fcr decrypting the 
encrypted data stream tc produce said clear data 
stream, wherein said clear data stream is 
unexposed when transferred from the central 
processing unit to said second structure ccupled 
tc the CPU. while said descrambling means within 
the central processing ucii accomplishes 
descrambling of the received scrambled data 
stream. 

( 2 ) The apparatus c f claim I t wherein said 
scrambled data stream comprises a scrambled, encode d 
data stream and wherein said apparatus further 
comprises a decoder coupled tc said decryption means 
for decoding a c!ear r encoded data stream produced fav 
said decryption means. 

( 3 } The apparatus of claim 2 . wherein said 
clear, encoded data stream comprises a video data 
stream and wherein said decoder comprises an MPEG 
video decoder. 

(4) The apparatus cf claim 2, "here in said 
scrambled, encoded data stream comprises a CSS 
scrambled. MPEG encoded data stream, and wherein said 
descrambling means c c m p rises means fcr CSS 
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d e s c f amb ling the s 


c r amb led, e 


needed d 


a : 


a stream 


within the CPU and 


said d e c c d 


e ; c c rap r 


i s 


e s means for 


MPEG decoding said 


clear, enc 


u d e d d a t 


a 


stream. 


(5) The apparatu 


s c f claim 


2 , where 


i n 


said 


decoder comprises 


a decoding 


hardware 


d 


e v i c e and said 


decrypt ice means r 


e s i d e s with 


in said 


de 


coding 


hardware device. 










(6) The apparatu 


s of claim 


1 , where 


i q 


said 


re-encryption mean 


s further c 


crap rises 


means for 


providing a key fc 


r use in re 


-encrypt 


i o 


g the clear 


data stream, and w 


herein said 


decrypt 


i c 


d means 


includes means for 


employing 


the k e y 


i n 


decrypting 


the encrypted data 


s t r e am . 








( 7 ) The apparatu 


s of claim 


6 . where 


: n 


said 


re-encryption mean 


s farther c 


emprises 


m 


cans; for 


encrypting said ke 


y t c p r c d u c 


e an enc 


r y 


pted key. and 


for multiplexing t 


he e c c r v p t e 


d key an 




ike encrypted 


data stream iota a 


m a ! t i p 1 c x e 


d data s 


t r 


earn for 


transfer to said s 


ec and s t r n c 


i u r e ecu 


Pi 


ed to the CPU, 


and wherein said d 


ecryplicn means fur 


ih 


e r comprises 


means f c r d e mu ! t i p 


I e x i n g said 


mo 1 1 i p I 


ex 


td data stream 


to obtain said enc 


r v p t e d key 


and said 


e 


Dcrypted data 


stream, and wherei 


o said deer 


y p t ion m e a 


n s further 


comprises me a g s f c 


r a e c r y p : : c 


g said enc 


r y p t e d key. 


' 8 } The apparatii 


s c f claim 


1 , furth 


e r 
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c (i m p r i s : n g means fcr selecting an 

encryption/decryption algorithm pair fcr use by said 
re-encrypt icn means and said decryption means. 

(9) The apparatus c f claim 8 . wherein said 

means fcr selecting comprises means fcr downloading a 
decryption algorithm cf said selected 
encryptic n/ decrypt ico algorithm pair from said 
re^encrypt icn means to said decrypt ica means, said means 
fcr downloading including means fcr encrypting the 
decryption algorithm fcr transfer between the re-encryptico 
means and the decryption means. 

(10) The apparatus of claim 8, wherein said 
means fcr selecting comprises means fcr selecting 
said encryption/decryption algorithm pair from a 
plurality cf encryption/decryption algorithm pairs at 
said re-encry prion means and said decryption means, 
and therein said means fcr selecting comprises means 
for noticing the decryption mean? which decryption 
algorithm c f said plurality c f encrypt ic n/ aecrypticn 
algorithm pairs corresponds with an encryption 
algorithm employed by said re-encryption means. 

(11) The apparatus cf claim 1 , wherein said 
decryption means comprises a decryption module 
disposed within the central processing unit, and said 
second structure coupled ic the CPj comprises memory. 
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(12) Apparatus fcr processing a data stream 
within a computer system having a centra! processing 
unit (CPU) coupled to receive the data stream, said 
apparatus comprising: 

encryption means within the CPU for 

encrypting identified copyright data within the 

data stream t c produce therefrctn encrypted data; 

means fcr transferring the encrypted data 

from the central processing unit tc a structure 

cf the computer system coupled thereto, wherein 

said copyright data is only transferred f r cm the 

central process iog unit as said encrypted data: 

and 

decryption means coupled tc said structure 
receiving the encrypted data, said decryption 
means comprising means fcr decrypting the 
encrypted data. 

(13) The apparatus cf claim 12. further 
comprising means fcT Identifying within the central 
processing unit said copyright data of the data 
stream, said means for identifying providing said 
identified copyright data t c said encryption means. 
(14] The apparatus c I claim 1 3 . wherein the data 
stream comprises a scrambled- encoded data stream. 
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and wherein said apparatus further comprises 
descrarabSing means fcr descr ambling the scrambled, 
e □ c c d e d data stream within the central precession 
unit tc produce a clear, encoded data stream, and 
wherein said means I c i identifying comprises means 
for examining the clear, en ceded data stream tc 
identify copyright data fcr encryption by said 
encryption means. 

(15) The apparatus of claim 12. wherein said 
decryption mean? comprises a microcode decryption 
device. 

(16) The apparatus c( claim 12, wherein said 
data stream comprises a scrambled data stream, and 
wherein saia apparatus further comprises means inr 

d e s c ; a in b i i o g the scrambled data stream prior t c said 
encrypting cf the identified copyright data by said 
encryption means, wherein said scrambled data stream 
is prod need from a different encryption algorithm 
than said e n c : y p ; e d data produced by said encryption 
me a n s . 

(17) The apparatus c f claim 12, ^herein said 
encryption means further comprises means for 
providing a key for use in said encrypting cf the 
identified copyright d a : a and for use by said 
decryption means for decrypting the encrypted data. 
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(18) The apparatus 


c f c 


la 


encryption means .fur 


ther 


c 


encrypting said key 


t c pre 


for multiplexing the 


e n c 


r y 


data iorc a multiple 


x e d 


da 


said structure ccupl 


ed t 


c 


decryption means fur 


ther 


c 


demo 1 1 i p 1 ex i ng sain 


mult 


i P 


said encrypted key a 


n d s 


a i 


wherein said decrypt 


: c n 


me 


f c r decrypting said 


e n c r 


yp 


(IS) The apparatus 


c f c 


la 


comprising means I at 


s e ; 


c c 


encrypt ion/decrypiic 


d a ! 


gc 


encryption means and 


s a i 


d 


plurality cf predefi 


c e d 


en 


algorithm pairs, s a i 


i s e 


ie 


a 1 go t i t b m pair ccmp: 


i s i n 


g 


a corresponding deer 


y p i i 


c n 


algorithm being empl 


eyed 


b 


d 11 U : 3 > Q Lx/JiCJtpi.nLjl 


Qg ri 


e c 


e m p i c v e d by said dec 


rypt 


1 c 


(2 0) A method for p 


r c ce 




stream within a c c m p 


u t e r 


c 


processing n n i : and 


a s t: 


: n 



i m I 7 . * t e x c i n said 

emprises means for 

dece an encrypted key. acd 

p t e d key and the encrypted 

ta stream fcr transfer to 

the CPU, and wherein said 

emprises means fcr 

! e x e d data stream tc cbtaio 

d encrypted data, and 

ans further comprise? means 

ted key. 

i m 1 2 . farther 

ting an 

r i t h m pair f <j i use by $ a i d 
decryption means f r u m a 
crypt i c n/ decrrpticn 
cted encryption/decryption 
an encryption a ] g c r i ■ hra and 
algorithm, said encryption 
y said encryption means, 
rypt i en algorithm being 
n means. 

i n g a scrambled data 
y s t e m having a central 
dure coupled thereto, said 
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me the d ccrap r i < 


i n i : 












( 3 ) receiving 


i he 


scrambled data 


s t r 


e am 


a t 




the central p : 


cc es 


sing unit (CPU) 










(b) d e s c r amb 1 


i n g 


the scrambled d 


a t a 


sire 


am 




within a mc d u 1 


e ex 


e c is i i d g c c the 


cent 


r a i 






processing unit to 


prcdnce clear 


data 








.(c) re-encrypting 


the clear data 


w i t 


h i n 






the centra! pr 


c c e s 


sing unit, said 


r e - 


e n c r 


7P 


ting 


prodncing at I 


east 


partially e n c : 


y p t e 


i i a 


t a 




(d) s n h s e q u e n 


t tc 


said re-encryp 


t in* 








transferring t 


he a 


t least partial 


1 y e 


n c r y 


Pt 


ed 


data from the 


cent 


ra 1 prcces s ing 


no i t 


t c 


a 




second s 1 1 a c t o 


: e c 


{ thee crop u t e r 


s y s t 


em . 


sa 


i d 


secend s t r u c t u 


:c b 


cing coupled to 


the 


c e c 


t r 


a 1 


processing uni 


t; a 


Dd 










{ e) subsequen 


t tc 


Said traosferr 


ing. 








retrieving and 


d e c 


r y p t i n g the at 


leas 


t pa 


r t 


i a i i y 


encrypted data 


: c 


produce clear d 


a : a . 


* h e 


r e 


; n 


said clear d a t 


a i s 


a o e x posed when 


t r a 


n s f e 


r r 


ed 


f r c m the c e n t r 


a 1 p 


recess iog unit 


tc t 


he 






structure c c u p 


i e d 


thereto, while 


said 








desciambiing c 


c c u r 


s within ! h e mo 


d u 1 e 


e x e 


c a 


ring 


c n the central 


p r n 


c e s si n g unit, a 


nd * 


here 


i n 


t h e 


scrambled d a : a 


s [ r 


earn is produced 


f r n in a 
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different encrypt i go algorithm than employed by- 
said r e - e n c r y p t i n g ( c ) tc produce said at least 
partially encrypted data. 

(21) The method c{ claim 20, wherein the 
scrambled data stream comprises a scrambled, encoded 
data stream, and wherein Said decrypting ( e ) 
comprises prcduciog clear, encoded data, and wherein 
said method further comprises deccding said clear, 
encoded data tc produce said clear data. 

(22) The method of claim 21, wherein said 
scrambled, eaccded data stream comprises a CSS 
scrambled, MPEG encoded data stream, and wherein said 
descrambling (b) comprise?. CSS d e ?. crambling said 
scrambled, encoded data siream w i : hi n the CPU, and 
said decoding comprises MPEG decoding said clear : 
encoded data tc produce said clear da; a. 

(2 3) The method c ' claim 20, wherein said re-encrypting 
(c) includes employing a key in re-encrypting the clear 
data, and wherein said method 
further comprises providing said key for said 
decrypting (e) . said decrypting empl eying said key in 
decrypting the a : least p a r : i a 1 1 y encrypted data, 
(24) The method of claim 23. wherein said re- 
encrypting ( c ) includes encrypting said key t c 
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produce an encrypted key, and multiplexing the 
encrypted key and the a: least partially encrypted 
data into a multiplexed data stream, and wherein said 
decrypting ( e ) further comprises demultiplexing said 
multiplexed data stream to obtain said encrypted key 
2 o d said a : least partially encrypted data, and said 
decrypting ( c ) further comprises decrypting Said 
encrypted key and employing said key i o decrypting 
said at least partially encrypted data. 

(25) The method cf claim 2fi. further comprising 
Selecting ao encrypt ice/ decryption algorithm pair for 
use by said re-encrypting ( c ) and said decrypting 

( e ) , said selecting comprising cheesing said selected 
encryption/ decryption algorithm pair from a plurality 
cf predefined encrypt inn/decry pticn algorithm pairs, 

(26) The method cf claim 25. therein said re- 
encrypting (c) accomplishes said selecting and said 
re-encrypting further comprises downloading a 
decryption algorithm cf the selected 

eocrypt ion/decrypt ion algorithm pair for use by said 
decrypting ( c ) , 

(27) The method c f c i a i m 20, ^herein said 
decrypting ( e ) comprises decrypting the at i e a s t 
partially encrypted data within the central 

p recessing unit, and where : d said structnre coupled 
to the centra! processing unit comprises a mercery 
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structure, said rctricviog (c; c cm prising retrieving 
said at leas: partially encrypted data from said 
memcry structure. 

(28) A metbed for pieces sing a data stream 
within a computer system having a centra! process iog 
unit a o d a structure outside the centra! processing 
unit coupled thereto, said method comprising: 

( a ) receiving the data stream at the 
centra 1 prcces sing unit (CPU) ; 

(b) encrypt in^ identified ccpy right data 
within the data stream tc produce encrypted 
data; 

(c) subsequent tc said encrypting (b) . 
transferring the encrypted data from the centra! 
processing unit ic the structure coupled 
thereto, wherein s a : d copyright data is only 
transferred from the central processing u a i i as 
said encrypted data; and 

(d) retrieving the encrypted data from the 
structure coupled to the CPU and decrypting the 
encrypted data to produce clear data, said 
decrypting occurring after transfer c f the 
encrypted data tc the structure cuts * ri f the 
centra! processing unit, therein said clear data 
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is u n e x p u s e d within the computer system when 
transferred between the c e q c r a I p ; u c e s s i n g unit 
and the structure g c u p I e d thereto. 

(29) The method cl claim 28, further comprising 
identifying within the central processing unit said 
copyright data cf the data stream fcr use by said 
encrypting (b) . 

(30) The tg e t h g d cf c I a i re 29, wherein said data 
stream comprises a scrambled data stream, and said 
method further comprises d e s c r a m b 1 i n g the scrambled 
data stream prior to Said identifying c f the 
copyright data, and wherein said scrambled data 

s. i r e a m is produced from a different encryption 
algorithm than employed by said encrypting (b) . 

(31) The method cf claim 28, wherein said 
encrypting (b) includes employing a key in encrypting 
said identified c c p y r i g li [ d a 1 a and presiding said key 
to said decrypting ( d ; . 

(3 2) The method cf claim 31. therein said 
e o c r 7 p t i n g ( b ) further comprises encrypting said key 
to produce an encrypted key, a o d m u I t i p 1 e x i n g the 
encrypted key and the e n c r ? p t e a data into a 
multiplexed data stream for transfer to said 
structure coupled to the C P J r and wherein said 
decrvp: iag ( d ) further comprises demultiplexing said 
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multiplexed data stream to Gbtain said encrypted key 
and Said eDcrypted data, and wherein said decrypting 
(d) further ccmpr ises decrypting said encrypted key 
f c r use in decrypting said encrypted data. 

(33) The method cf claim 28. further ccmpr i si tig 
selecting an encryption/decryption algcrithra pair 
from a plurality cf predefined encrypt ion/riecrypt icn 
algcrithra pairs, and wherein said encrypting (b) 
comprises employing an encryption algorithm cf said 
selected encryption/decryption algorithm pair in 
encrypting said identified copyright data, and said 
decrypting ( d ) comprises employing a corresponding 
decryption algorithm ct said selected 

e d c r ypt i co/d e c r y p t i c n algorithm pair for use in 
decrypting the encrypted data. 

(34) A computer program producing comprising a 
computer nsable medium having computer readable 
prcgram cede means therein for use in processing a 
scrambled data stream within a computer system having 
a central processing unit and a structure ccupled 
theretc, said compute: readable program cede means in 
said computer program product comprising: 

computer readable program code means fcr 
causing a compute: t c affect receiving c f the 
scrambled data stream at the central processing 
unit and fo: d e s c r amb i i o g the scrambled data 
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Stream within the central processing unit U 
produce clear data, and for re-eccrypting the 
clear da la within the central processing unit to 
produce at least partially encrypted data; 
computer readable program cede means for 
causing a computer tc affect transferring of 
said at least partially encrypted data from the 
centra! processing unit tc the structure coupled 
thereto: and 

computer readable program cede means f g r 
causing a computer tc affect retrieving cf the 
at least partially encrypted data from the 
structure c. c a p I e d t c the CPU and for decrypting 
the at least partially encrypted data, said 
decrypting producing clear data, wherein said 
clear data is unexposed when transferred from 
the centra! processing unit t c the succiurc 
coupled thereto, while said descramb! ing occurs 
within the central processing unit. 
(35) The ccmputer readable program cede means cf 
claim 34, wherein the scrambled data stream ccmprises 
a scrarcbied ; encoded da:a stream, and wherein said 
computer readable program c g d e means in said computer 
prcgram prcduct further comprises compute: readable 
program cede means for causing a ccmputer to affect 
decoding of ciea:, encoded data p r c d s c e a by said 
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c crap uter readable 



program code means fcr decrypting 



the at leas: parti 



ally encrypted data. 
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readable program cede means of 



claim 35, wherein said scrambled, encoded data stream 
comprises a CSS scrambled. MPEG encoded data stream 
and wherein Said ccmpite: readable cede means fcr 
descrambling said scrambled, eGecded data stream 
comprises computer readable program code means fcr 
causing a computer tc affect CSS descrambiing cf the 
scrambled, encoded data stream, and wherein said 
computer readable program cede means for deccding 
comprises computer readable program code means for 
causing a computer to affect MPEG decoding of ? a i d 
clear, encoded data stream. 

(37) A cumputer program prcdoct comprising a 

computer useable medium having computer readable 

program cede means l be: tin for use in processing a 

data stream within a computer s 7 s : e m having a centra! 

processing unit and a structure cut side the central 

processing unit coupled thereto, said computer 

readable prcgram code means in said computer program v> 

prcdoct comprising: 

compere: readable program cede means for 
causing a compute: tc affect receiving cf the 
data stream at the centra! processing unit and 
encrypting cf identified copyright data within 
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the data stream t c- produce encrypted data; 
computer readable program cede means f c j 
causing a c c m p u ; e r t c affect transferring c f the 
encrypted data (rem the ccatral p recessing unit 
tc the structure cut side the centra! processing 
unit; a d d 

computer readable program cede means for 
causing a computer tc affect retrieving and 
decrypting c f the encrypted data after transfer 
tc the structure outside the central processing 
unit, Therein clear data is unexpesed within the 
computer system when transferred between the 
central processing unit and the structure 
coupled thereto. 

(38) The computer readable program cede means cf 
claim 37, further comprising computer readable 
program code means for causing a computer to affect 
identifying said copyright data cf the data stream 
for encrypting. 

(39) The computer readable program cede means cf 
claim 37, wherein said computer readable program code 
means for e n c ' y p i i n % the identified copyright data 
includes c c m p u : e t readable program c c i c means f c r 
causing a c c m p a : e r t c affect said encrypting d s i n g a 
key and f c : providing said key i c said computer 
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readable p r c g r am c 


c d e means 


encrypted data. 






(40) The ccrnpt t e: 


r e a d a b 


le 


claim 39, wherein 


said c cmp 


means fcr encrypti 


n g c c m p 


r i 


program cede rac a os 


fcr c a 


u s 


encrypting cf said 


key L o 


P 


and for multiplexi 


o g the 


e n 


encrypted data iot 


g a rau 1 


t i 


transfer t c said s 


t * u c t u r 


e 


wherein said ccmpu 


i e r r e a 


da 


decrypting c omp r i s 


e s c cmp 


a t 


means fcr causing 


a ccmpu 


te 


cf the multiplexed 


data s 


t r 


encrypted key and 


said en 


c r 


decryp; ing the eoc 


ry pted 


ke 


the encrypted data 


• 




(41) The ccmputer 


r c a d a b 


Ic 


claim 37, further 


c c in p ; i s 


i n 


program cede means 


fcr ca 


u s 


selecting an encry 


ft i c n/d 


e c 


use in encrypting 


said id 


e q 


decrypting said en 


e r y p t e ri 


d 


encrypt ion/decrypt 


:cd a 1 g 


c r 


frcm a plurality o 


f p r e d e 


t : 

1 ; 


a 1 g c r i t hm pairs, a 


nd fcr: 


he 



fcr decrypting the 

pre gram cede means c f 
u t e i readable program cede 
s e s c cmpu t e r readable 
ing a computer to affect 
reduce an encrypted key, 
crypted key and the 
plexed data stream fcr 
ecu pied tc the CPU. and 
b!e program cede means fcr 
er readable program cede 
r tc affect demultiplexing 
earn to obtain said 
y p t e i data, and fcr 
y fcr use in decrypting 

program cede means cf 
% compute: readable 
ing a c cmp u t e r I c affect 
r y p t i c n algorithm pair fcr 
t i f i e d copyright data and 
a t a . said selected 
ithm pair being selected 
fi e d encrypt icn/decrypt icn 
r comprising ccmputer 
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readable program cede means (cr causing a computer tc 
affect net icing cf a corresponding decryption 
aigcrithm cf the selected encryption/decryption 
algorithm pair to said computer readable program code 
means for decrypting the encrypted data. 
3 . Detailed Description c f Invention 
Technical Field 

The present invention relates in genera! to 
apparatus and method fcr protecting digital 
videc/aodic data and. more p a r i l c u I a r 1 y , tc an 
apparatus, method and computer program product tor 
encrypt ion/decrypt ion of data within a computer 
system fcr c emm u n i c a t i o n from a CPU tc an accessible 
internal structure, such as memory cr a bus. without 
exposing the data in unscrambled form at the 
accessible structure. 
Background cf the Invention 

Within the past decade, the advent c f w c r 1 d - * i d e 

electronic communications systems has enhanced the 

ffav in which people can send and receive lofcrmat ico. 

In particular, the capabilities of real -time video 

and audio systems have greatly improved in recent 

years. In order to provide services such as video-on-demand 
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video conferencing, a n i digital video disc 
(DVD) motion pictures, an eoormcos amcunt cf 
bandwidth is required. Id fact, bandwidth is c= f ten 
the main inhibitor in the effectiveness cf such 
s y s t eras . 

In order tc overcome the constraints imposed by 
existing technology, compression systems have 
emerged . These systems reduce the amount cf video 
and aodic data which must be transmitted by removing 
redundancy in the picture sequence. At the receiving 
end, the picture sequence is uncompressed and may be 
displayed in real time. 

One example cf an emerging video compression 
standard is the Moving Picture Experts Gruup ("MPEG") 
standard. Within the MPEG standard, video 
compression is defined both within a picture and 
between pictures. Video compression within a picture 
is accomplished by conversion cf the digital image 
from the time domain tc the frequency domain by a 
discrete cosine transform, quantization, variable 
length ceding, and Huffman ceding. Video compression 
between pictures is accomplished via a process 
referred t c as "motion e s t i m a : i o n " ? in which a motion 
vector pins difference ri a : a is used t c describe the 
translation cf a ser cf picture elements from cue 
picture to a no the;. The ISO MPEG 2 standard specifies 
only the s y n : a x c f b i : s i r e a m and semantics c f the 
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Briefly summarized, this invent ice comprises in 
a first aspect apparatus fcr processing a scrambled 
data stream within a computer system having a central 
processing unit (CPU) coupled tc receive the 
scrambled data stream. The apparatus includes a 
descrambiing means within the central processing unit 
tc descramble the received, scrambled data stream and 
thereby produce a clear data stream. He-encryption 
means also within the central processing unit re-encrypts 
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the particular s c r arab 1 i ng/de s c r amb I i ng algorithm 
employed may vary. The c c o c c p t is t c initiate the 
d e s c i a m b i i n g process by h c s t s c f t w a r c , rcscramblc the 
data at the centra! processing u o i t using a different 
encryption technique, a o d then complete the 
d e s c r amb I i ng at the receiving module, whether the 
receiving m c d u 1 e comprises an additional software 
module executing on the central processing unit cr a 
receiving hardware device, such as a decoder resident 
on a system bus coupled to the central processing 
unit. The rescrambling subsequent to primary 
soft ware descrambliog cl the received encrypted data 
may be complete cr partial, At the receiving module, 
the rescrambled data can be decrypted for display, 
output via an audio card, cr undergo further 
process i & g . 

Best Mode For Carrying Out The Invention 
Generally stated, the present invention 
comprises an apparatus, method and compute: program 
product for processing a data stream scrambled, for 
example, by employing content scrambling system (CSS) 
technology. As one aspect, the invention comprises 
d e s c r a m b i i n % a received CSS encrypted signal at a 
centra! processing unit without s u b s e q u e n i i y exposing 
a clear copy of the d e s c r a rr b 1 e ri data in any 
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module whether data needs tc be protected during 
subsequent transmission f r c m the computer system' s 
CPU. tf "yes'', then the primary module communicates 
tc the software module and/or hardware device 
ultimately tc receive the stream c f data tc establish 
an encrypt i c n/ decrypt icq algorithm pair. This 
communication may involve downloading the decryption 
algorithm into the receiving software module and/cr 
hardware device or s i g q a ! i u g the decrypting 
software/hardware which decryption algorithm from a 
plurality of predefined encryption/decryption 
algorithm pairs is tc be used. The primary module 
uses the selected encryption a I g c r i t h m to r c - e n c t y p t 
the descrambied data for transfer through any 
accessible structure, such as ©emery and/or system 
buses, to the receiving software module and/cr 
hardware device which is tc accomplish the final 
decryption. The receiving module, which may also be 
located within the central preceding unit, then 
decrypts the data and performs conventional 
processing thereon. As an alternative example, the 
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a seccndary (cr receiving) prccessiGg software module 

20 are each executed within the computer system's 
central processing unit (CPU). A processing unit 
hardware device 30 (such as a decoder) resides cd cne 
c I the buses 26 c I t b c computer system. 
Communication between primary software module 10 and 
software module 20 aad/cr processing hardware 30 
requires data transfer through memory 25 anc/cr 
system bus 26, both located outside the CPU 11. 
Software module 10 contains a data processing module 

21 and an encryption module 22. Data processing 
module 21 comprises any conventional processing tc be 
dene tc the data stream, and in accordance with the 
present invention, also includes desc rambling (such 
as CSS d e s c r amb ! i a g) of a received encrypted, 
original data sir earn. Processing module 20 contains 

a decryption module 23 and a processing module 24, 
while processing hardware device 30 includes a 
decryption device 27 and a d a : a p recessing device 28. 
Original data arrives at the central processing 
unit 11. for example, from an externa! storage device 
cr from a compute: system network. This data may 
contain a portion which needs tc be prelected from 
illegal ^copying. This per: i c d is denoted "copyright 
data" herein tc distinguish i: from the original 
data. If the entire original data needs tc be 
prctec-es. then the copyright data is equivalent tc 
the original data. The c r i g i n a ! data is first 
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transferred tc the input of module 10 f c r processing 
by data processing 21. Again, for example, this may 
include descrambling cf CSS encrypted original data. 
The identified copyright data is then re-encrypted by 
encryption module 2 2 using a different encryption 
algorithm , i.e.. an encryption algorithm ether than 
CSS encryption. The original data passing through 
module 10 can comprise an unencrypted data stream or 
ao encrypted data stream. Id the first case, 
processing module 21 processes the original data and 
encryption module 22 performs an encryption algorithm 
tc encrypt any copyright data. By way cf example, 
the encryption algorithm could be cf the type 
described in R. Schneier, Applied Cryptography . John 
Wiley & Sens Inc . , 2nd Ed . (19 9 6) . 
In the second case, processing mcdule 21 can 
decrypt the original data, after which encryption 
module 22 would re-encrypt the copyright portion c f 
it using a selected encryption algorithm, which again 
can be of the type described in Applied Cryptography . 
This procedure is called i r a o £ - e a c r y p t i c n . 
Alternatively, processing module 21 can choose act tc 
decrypt the original data and mcdule 22 could then 
encrypt c n top c f the originally encrypted copyright 
data. This procedure is referred t c as i a y e r - e n c r v p t i c o . 
Advantageously, trans-encryption a i • c w s 
the encryption algorithm e m p i c y e d within the computer 
system in accordance with this invention t c be 



(46) 



different f r c m that employed by the original data, 
e.g., CSS encryption. Layer-encryption allows 
multiple encryption algorithms tc be employed, 
thereby enhancing security. 

The encrypted copyright data can be transferred 
tc/thrcugh system memory 25 and/cr system bus 26 for 
ultimate receipt by secondary processing module 20 
and/cr processing bard ware device 30. As do ted 
above, module 20 has a decrypt ico module 23 and a 
data processing module 24. while hardware device 30 
contains a decryption device 27 and a data processing 
device 28. Decryption module 23 and/cr device 27 
decrypts the data encrypted by encryption module 22. 
The decrypted data is then processed by the data 
processing module 24 and/cr data processing device 
2 8, respectively. 

The encryption/decryption algorithm pair 
employed by encryption module 22 and decrypt inn 
module 23 (and/cr device 27) can be a default 
algorithm pair predefined in the design stage cf 
modules 10 I 2 0 and/cr hardware device 30. 
Alternatively, the algorithm pair can be a 
downloadable algorithm. 

For exampie : there can be multiple encryption 
a 1 g c i i : h m s b u i ! : into encryption module 22 and 
multiple decrypiicn m c d u i e s built into decrypt Lea 
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module 23 and/cr decrypt ico device 27. Only cne 
matched pair will be used at any given time. Before 
encryption, the encryption module 2 2 sends a signal 
tc mcdule 23 and/cr device 27 tc net ice them which 
particular algorithm mcdule 22 will employ. This 
signal can be in the form cl a software parameter, or 
a software cr a hardware interrupt. The decryption 
module 2 3 and/cr decrypt icq device 2 7 then employs 
the corresponding decrypt ice algorithm c( the 
selected encryption/decryption algorithm pair. Since 
nc actual algorithm content is passed between the 
modules and devices, the actual encryption algorithm 
employed will net be kac*Q unless reverse engineering 
is performed within the software modules and/cr the 
hardware devices. 

Alternatively, encryption module 22 and 
decryption module 23 (cr decrypt ico device 27) can be 
predefined at the design stage to include a resident 
e n c r y p t i c n/d ecrypticn rcutice. Before encryption, 
module 22 would decide cn an actual encryption and 
decryption algorithm pair tc be used. Module 22 
would use i h c resident encryption a i g u r i t fa m to 
encrypt the actual decryption routine of the selected 
algorithm pair tc be used by the decryption module 23 
a d d/c : decryption device 27. The c o c r y p : i c n module 
2 2 then i r a n s m i i s the encrypted version of the actual 
decryption algorithm to module 23 and/cr device 27. 
Up c a receipt c f this information, the decryption 
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mcdule 2 3 and/cr device 2 7 employs the resident 
decryption algorithm tc decrypt the downloaded 
decrypt Icn algorithm.. Module 23 then uses the 
d e s c r a m b 1 e d decryption algorithm as a procedure cali, 
wfc i I e device 27 cculd lead the algorithm into a 
programmable circuit with id device 27. After 
completing downloading cf the actual decryption 
algorithm, module 22 uses the actual eccrypticn 
algorithm to encrypt the data, and module 23 and/cr 
device 27 employs the downloaded decryption routine 
tc decrypt the data. If an update cf the 
encrypt ic o/ decryption routine is desired, then a 
different e n c ; y p t i c o/d e c r y p t i c o a I g c r i l h m pair is 
selected and encryption module 22 downleads the 
corresponding decryption algorithm into the 
decryption module 23 and/cr decryption device 27, 
After decrypt ico is performed, the receiving 
data processing module 24 and/cr device 28 performs 
any required data processing, such as MPEG decoding 
cf a clear, compressed vi dec/audio data signal. 
Fig. 2 depicts a flowchart cf one embodiment cf 
processing to establish encryption and decryption 
procedures to secure the data in accordance with the 
present invention using the apparatus cf Fig. 1. 
This processing ficw is starred when original data 
enters the input of s o f : * a r e m o d u : e 10 'Fig. 1 ) . 
Mcdnie 10 initial !? determines wheiher the received 
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data needs t c be protected 50. If a o c B . then module 
2 2 c Grate uo i c a t e s the data directly tc secondary module 
20 and/cr device 30 at step 60. For example, in a 
DVD applicaticn, module 10 can examine the Copy 
Generation Management System (CGMS) date. If the 
received data needs tc be protected, then at step 51 
processing communicates (rem module 22 tc decryption 
module 23 and/cr decryption device 2 7 that decrypt! en 
is needed prior tc use cf the data. 
Next, processing determines whether a decrypt ice 
algorithm needs tc be downloaded (step 52). If "oc", 
meaning that a default decryption algorithm is tc be 
used, processing proceeds directly tc step 54. 
Otherwise, the algorithm is downloaded into 
decryption module 23 aud/cr decryption device 27 at 
step 53 . 

After establishing the decryption a ; g c r i i h m . 
encryption module 2 2 c emmn n i c a t e s a key to decryption 
module 2 3 and/cr decryption device 2 1 (step 5 4). and 
ases the key and the encryption algorithm to encrypt 
the copyright data (step 55). The encrypted key and 
encrypted d a i a can be sen: as a single biisiream, c r 
separately, tc module 2 3 anc/c; device 2 7 by way of 
system memory and/or a system bus. A: step 56. the 
decrypt ice m c d u \ e 2 3 and/cr decryption device 27 uses 
the chosen c : the d a * n i c a d e i algorithm to dec r v p i the 
data. Module 22 then determines whether the 
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encryption key should be updated 57. If fl nc a . the 
ecciypt icD and decryption processing steps 55 £ 56 
are repeated. If desired, the same encryption key 
c a n be used until the end c f the data stream 
transmission. Otherwise, return is made to step 54 
(or communication of a new encryption key to module 
23 and/cr device 2 7. 
Fig, 3 depicts one embodiment c( 
apparatus/processing for updating encrypt icn keys 
pursuant t c steps 54 through 57 c f Fig. 2 . Within 
module 22 there is a key generation module 79. a key 
encryption mode 1 e 80. a data encryption module 81 and 
a data multiplexer module 82. Key generation mcdule 
79 generates an c : i g i n a i key which is encrypted by 
mcdule 80 and also used by mcdule 81 to encrypt the 
crigina! data. Data multiplexer 82 combines the 
encrypted key and the encrypted data i n i c cne data 
stream, which is t h e a t r a a s j& i 1 1 e d through memory 
and/or system bus 8 3 to the decryption module 23 
and/or decryption device 27. The decryption module 
2 3 and decryption device 27 contains a data 
demultiplexer module/device 84. a key decryption 
module/device 85 and a data decryption module/device 
86. The data demultiplexer module/device 84 
decouples the received data stream into the encrypted 
data and the encrypted key. The key is then 
decrypted by key decryption module/device 85 to 
produce the critical key. Da -a decrypt igo module 86 
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uses the original key i c decrypt t It e encrypted data. 
Fig. 4 depicts a further embodiment cf 
processing in acccrdaoce with the present invention. 
In this embodiment, r e s c r amb I i n g cf the data stream 
is employed after CSS decryption, alcog with 
subsequent descrarobling cf the re-encrypted stream 
prior tc decompress icn decoding in a decoder chip. 
The processings described are preferably accomplished 
within en-chip microcode. 
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picture 12 0 are scrambled in accordance with bit 
stream re scramble 116 processing such that the data 
stream is a : least partially- re-encrypted subsequent 
to the DVD d esc rambling processing 111?. A decryption 
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as a decoder. The r e s c r a m b i i n g subsequent tc primary 
software d e s c r a m b i i n g c f the received encrypted data 
may be complete cr partial. Fcr example, in one 
crabc d ime n t f certain MPEG data can be scrambled by the 
host software. The host would then transmit the 
appropriate dcscramblicg micrcccde leads cr a single 
microcode lead with an appropriate key or keys to the 
receiving module or receiving hardware device. At 
the receive mcduie. the microcode performs the 
inverse cf the scrambling algorithm used by the host. 
The key may be static cr accumulated. 
Further, these skilled io the art will note that 
the present invention can be included in an article 
cf manufacture (e.g.. one cr mere computer program 
products) having, fcr instance, computer useable 
media. The media has embodied therein, for instance, 
computer readable program cede means fcr providing 
and facilitating the capabilities c f the present 
invention. Toe articles manufactured can be included 
as pari c f the computer system u r sold separately. 
The flow diagrams depicted herein are provided 
by way cf example. There may be many variations tc 
these diagrams c: the steps cr opera liens described 
herein without departing from the s p i ; i i c t the 
invention. For instance, in certain cases the steps 
may be performed in differing order, or steps may be 
added, deleted cr modified. Further, although 
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Fig. 2 is a flowchart cf one embodiment fcr 

accomplishing encryption/decryption processing in 

accordance with the present i o v e n t i c a ; 

F i £ . 3 is a bicck diagram cf cue embodiment fcr 

updating keys within the encryption and decryption 

modules and/cr devices cf an apparatus in accordance 

with the present invent i c n ; and 

Fig. 4 is a representation of cce embodiment cf 

DVD disc data stream processing using microcode in 

accordance with the present invention. 
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1 . Abstract 

Apparatus, method and computer program product 
are provided for digitally processing an encrypted 
data stream scrambled, for example, according to 
content scrambling system (CSS) technology. This 
digital processing insures against communication of 
clear data within the computer system from a central 
processing unit (CPU) to any accessible structure, 
such as memory or a system bus- Descrambling of the 
(CSS) scrambled data stream occurs within a module 
executing on the CPU, which is followed by re- 
encryption of the data prior to transfer from the 
CPU. By so processing the data, integrity of 
copyrighted material is maintained, while allowing 
for software descrambling of the CSS encrypted data 
stream. Various techniques for establishing the 
encryption/decryption algorithm pair employed are 
described. Decryption of the re-encrypted data can 
occur at a receiving software module and/or a 
receiving hardware device, such as a decoder, 

2 . Representative Drawing 
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